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Consider  a  system  of  independent  components  labeled  1  through  m.  We  assume  that  the  system 
forms  a  coherent  structure,  which  we  denote  by  In  particular  the  system  and  each  component  are 
in  either  a  functioning  state  or  a  failed  state,  and  the  state  of  the  system  depends  only  on  the  states 
of  the  components;  see  Barlow  and  Proechan  (1981,  Chapters  1  and  2)  for  definitions  and  basic  facts 
relating  to  coherent  systems. 

Suppose  that  we  have  a  sample  of  n  independent  systems,  each  with  the  same  structure  4>.  Each 
system  is  continuously  observed  until  it  fails.  For  every  component  in  each  system,  either  a  failure 
time  or  a  censoring  time  is  recorded.  A  failure  time  is  recorded  if  the  component  fails  before  or  at  the 
time  of  system  failure.  A  censoring  time  is  recorded  if  the  component  is  still  functioning  at  the  time  of 
system  failure.  From  these  failure  times  and  censoring  times  we  wish  to  estimate  F,  the  distribution 
of  the  system  lifelength. 

Let 

Ti  =  lifelength  of  system  t. 

We  note  that  F  may  be  estimated  by  the  empirical  estimator 


where  1(A)  is  the  indicator  of  the  set  A.  However,  P*mp  is  unsatisfactory  in  that  it  does  not  fully 
utilize  the  information  contained  in  the  sample.  Specifically,  it  does  not  use  the  identity  of  the 
components  still  functioning  at  system  failure  time,  nor  the  failure  times  of  the  components  failing 
before  system  failure  time. 

The  purpose  of  this  paper  is  two-fold.  First,  we  present  an  estimator  P  of  F  that  does  use  all  the 
information  contained  in  the  sample.  Second,  we  apply  (in  Section  2)  the  statistical  theory  of  counting 
processes  initiated  by  Aalen  (1978)  to  obtain  the  asymptotic  distribution  of  P  in  the  observational 
scheme  described  above,  and  show  (in  Section  6)  how  this  theory  can  be  used  to  study  several  >ther 
problems  involving  related  observational  schemes. 

To  construct  our  estimator  P  we  first  obtain  estimators  of  the  distributions  of  the  component 
lifelengtha,  and  then  combine  these  in  a  suitable  way.  To  describe  P  fully  we  introduce  some  notation: 

Xij  is  the  lifelength  of  component  j  in  system  i; 


Fj  is  the  distribution  of  the  lifelength  of  component  j  (Thus,  Xiy,Xjy,. . . ,  Xn]  are  i.i.d.  —  F})\ 
Zn  —  ,  Ti); 

=  I(Xif  <  Ti); 

Hj  is  the  common  distribution  of  the  independent  random  variables  Z\, , . . . ,  Zn 

Here  and  throughout  the  paper  the  letter  t  indexes  systems  and  j  indexes  components;  t  ranges 
over  1, . . . , n,  and  j  over  1  For  each  j,  let  Z( <  Z^)j  <  ...  <  be  the  ordered  values 

of  Z iy,  Z? y  |  . . . ,  Zf\,  >  Define 
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toy 
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corresponds  to  an  uncensored  lifetime 
corresponds  to  a  censored  lifetime. 


(1.2) 


(When  an  uncensored  and  a  censored  observation  are  tied,  the  uncensored  observation  is  considered 
to  have  occurred  first.)  Let  Pj  denote  the  Kaplan-Meier  estimator  of  Fj: 


*«> = 1  - .  n  r- 


(1.3) 


The  definition  above  differs  from  the  usual  definition  of  the  Kaplan-Meier  estimator  in  that  Fj(t)  is 
not  arbitrarily  defined  to  be  1  for  t  >  Z(n),-. 

For  each  coherent  sturcture  <j>  of  independent  components,  there  corresponds  a  function  h+,  called 
the  reliability  function,  such  that 

P{t)=h4(Px(t),...,Pm{t)).  (1.4) 

(For  a  distribution  function  G,C!(t)  denotes  1  -  G(t).}  A  more  detailed  description  of  reliability 
functions  is  provided  in  Chapter  2  of  Barlow  and  Proechan  (1981).  The  estimator  F  is  defined  by 

1  —  ^♦(^l(f)i  •  •  •  »  ^fn(O)  if  ^  <  T(n)  (1.5) 

\  1  if  *  >  T{n) 

Here,  TJ*)  =  max(7\, 7a,. . . ,  7\).  The  estimator  F  has  obvious  intuitive  appeal. 

The  properties  of  the  Kaplan-Meier  estimator  have  been  studied  extensively  by  various  authors. 
Under  the  assumption  that  the  censoring  variables  and  the  lifelengths  are  independent,  the  Kaplan- 
Meier  estimator  is  the  maximum  likelihood  estimator  (Kaplan  and  Meier,  1958;  Johansen,  1978). 
Regarded  as  a  stochastic  process,  it  is  strongly  uniformly  consistent  (Foldes,  Rejto,  and  Winter, 
1980)  and  when  normalised  converges  weakly  to  a  Gaussian  process  (Breslow  and  Crowley,  1974, 
Aalen,  1976,  and  Gill,  1983). 


The  main  results  of  this  paper  can  now  be  stated.  Let  f}[0,  T]  be  the  space  of  all  real  valued 
functions  defined  on  [0,T]  that  are  right  continuous  and  have  left  limits,  with  the  Skorohod  metric 
topology.  Dm\0,T]  denotes  the  product  metric  space. 

THEOREM  1.  Suppose  . . .,Fm  are  continuous,  and  let  T  be  such  that  F,(T)  <  1  for  j  = 

1, 2, . . . ,  m.  Then  as  n  -*  oo 

»*(A  -  FltP2  -  -  Fm)  ->  (WUW2 . Wm) 

weakly  in  Dm[0,T],  where  . . . ,  Wm  are  independent  mean  0  Gaussian  processes.  The  covariance 
structure  of  Wj  is  given  by 

Co*  (»,((,), W,(i,))  =  f"  fot  0  <  (.  <  t,  <  T.  (1.6) 

Since  in  general  the  dependence  among  the  Pj'a  may  be  complex,  Theorem  1  is  not  a  trivial  extension 
of  the  corresponding  result  for  the  individual  Kaplan-Meier  estimators  Pj. 


Theorem  1  together  with  an  application  of  the  delta  method  yields  weak  convergence  of  the 
estimator  P.  Let 


!»(*)  —  . 


(1.7) 


THEOREM  2.  Suppose  Flt  Fj,. . . ,  Fm  are  continuous,  and  suppose  T  is  such  that  Fj(T)  <  1  for 
j  —  1, 2, . . . ,  m.  Then  as  n  -♦  oo 

n*(P  -  F)  -  W  weakly  in  0[O,r|, 

where  W  is  a  mean  0  Gaussian  process  with  covariance  structure  given  by 

fW  j  p  /  \ 

ccrmtihwm-ZwiWhMiuWiMj'  eiwf.iu)  for  05,1  s‘^r-  ('•*) 

The  commonly  used  estimate  of  the  variance  of  the  Kaplan-Meier  estimate  is  given  by  Greenwood’s 
formula  (see  Chapter  3  of  Miller,  1981).  Since  this  estimate  is  known  to  be  consistent  (see  Hall  and 
Wellner,  1980),  it  follows  that  for  fixed  t,  the  variance  of  P[t)  given  in  Theorem  2  can  be  consistently 
estimated.  This  enables  the  construction  of  confidence  intervals  for  F(t)  in  large  samples. 

The  competing  risks  model  corresponds  to  a  series  system.  Aalen  (1976)  showed  that  for  this 
model,  the  vector  of  Kaplan-Meier  estimates  (Pi,. . .  ,Pm)t  when  normalized,  converges  to  a  multi¬ 
dimensional  Gaussian  process,  whose  components  are  independent.  This  result  corresponds  to  our 
Theorem  1  for  the  case  of  a  series  structure. 


We  note  that  (assuming  Fi , . . . ,  Fm  to  be  continuous)  the  data  from  the  competing  risks  model 
is  the  death  time  of  the  system  and  the  identity  of  the  component  causing  the  death  of  the  system. 
Meilijson  (1981)  expanded  this  to  the  case  of  a  coherent  system  in  an  autopsy  model  :  at  system 
death  time  T,  an  autopsy  is  performed  which  reveals  the  set  D  of  dead  components  (the  identity  of 
the  component  causing  system  death  is  not  given  by  the  autopsy).  This  model  yields  less  information 
than  does  ours.  Meilijson  considered  the  identifiability  question  of  when  does  the  distribution  of 
(T,  D)  determine  F\ , . . . ,  Fm. 

The  present  paper  is  organized  as  follows.  In  Section  2  we  prove  Theorems  1  and  2.  In  Section  3 
we  give  an  application  of  our  results  to  system  design  methods.  In  Section  4  we  discuss  the  efficiency 
of  our  estimator  vs.  the  empirical  estimator  (1.1).  In  Section  5  we  present  results  for  a  parametric 
formulation  of  our  model.  In  Section  6  we  discuss  Meilijson’s  model  as  well  as  other  models  where  the 
data  can  yield  more  information  than  just  The  appendix  gives  a  proof  of  a  result  used  in 

Sections  2  and  5. 

2.  WEAK  CONVERGENCE  RESULTS. 

2.1.  Random  censoring  and  preliminaries. 


Corresponding  to  a  generic  system,  we  define  generic  random  variables  Xj,Zj,6j,  and  T,  such 
that  the  random  vector  (XJt  Zj,  6J  tT )  has  the  same  distribution  as  (Xij,Zij,Sij,Ti)  for  i  =  1, 2, . . . ,  n, 
and  j  =  1,2,. . .  ,m. 

In  Section  1  it  is  noted  that  the  strong  consistency  and  weak  convergence  results  for  the  Kaplan- 
Meier  estimator  are  valid  under  the  assumption  that  the  lifelengths  and  the  censoring  random  variables 
are  independent.  In  our  model,  for  each  j,  X}  is  censored  by  T,  and  for  a  coherent  structure  these 
two  random  variables  are  dependent.  However,  it  is  possible  to  redefine  the  censoring  variables  to 
circumvent  this  difficulty.  This  is  best  explained  in  terms  of  a  simple  example.  Consider  the  structure 
shown  diagrammatic  ally  in  Figure  2.1. 


In  the  example  T  =  Xi  A  (Xi  V  ^3),  where  x  A  y  =  min(x,y)and  rVy  =  max(x,y).  Consider  now 
component  1.  Clearly  Xj  is  censored  by  Yi  =  X?V  X$,  which  is  independent  of  Xi .  Similarly,  X?  is 
censored  by  Y3  =  Xi ,  and  X$  by  Ya  =  X\ . 

A  central  result  of  this  paper,  shown  in  the  appendix,  is  that  this  construction  can  always  be 
made:  in  general,  for  each  j  —  1, . . . ,  m,  there  is  a  random  variable  Yj  such  that 

(Zy,«,)  =  (X,  A  Yj,I(Xj  <  Yi)),  (2.1) 

and 

Xj  and  Yj  are  independent.  (2.2) 

Roughly  speaking,  Yj  is  the  lifelength  of  the  system  if  Xj  is  replaced  by  00.  Proposition  A.l  states 
that  to  determine  whether  or  not  component  j’s  lifelength  has  been  censored  by  time  t,  it  is  enough  to 
know  the  history  of  the  other  components  (or  of  Yj)  up  to  time  t.  We  will  refer  to  Yj  as  the  censoring 
variable  of  Xj. 

In  order  to  describe  the  distribution  of  Yj  we  introduce  some  notation.  For  y  =  (yi,. . .  ,ym)  e 
(0, l]m,  a  e  [0,1],  and  j  =  l,...,m,  let 

(®j»y)  =  (yi,.-.»yy-i»a.y*+i.-..,ym)-  (2.3) 

Let  £(t)  =  (A(0,.  •  •  »£»(<))  “d  recall  that  Hj  is  the  distribution  of  Zj.  In  the  appendix  it  is  shown 
that 

P{Yi  >  <)  -  *♦<!,.£(<)),  (2.4) 

where  h+  is  reliability  function  (see  (1.4)).  Thus, 

£,(<)  -  .£(<))•  (2.5) 

We  now  review  some  terminology  from  reliability  theory  (see  e.g.  Barlow  and  Proschan,  1981) 
to  be  used  in  the  proofs  of  consistency  and  weak  convergence  of  P.  For  a  coherent  system  of  m 
components,  the  states  of  the  components  correspond  to  a  vector  U  =  (I/j, . . . ,  Um),  where  Uj  =  / 
(component  j  is  in  a  functioning  state).  The  structure  function  is  defined  by  4>{U)  =  I  (system 
functions  when  U  describes  the  stated  of  the  components)  for  U  e  Am,  where  j4m  =  {0,1}"*.  It  is 
well-known  (and  easy  to  see)  that  for  p  =  (plt . . .  ,pm)  e  [0,  l)m, 


»  '  ,1 


3 


Ml>)  “  E  WO  II '/'f1 (2-6] 

y»l 

where  0°  =  1  by  definition. 

The  Kaplan-Meier  estimates  Fj  given  by  (1.3)  will  be  denoted  F!>  when  we  want  to  emphasize 
the  dependence  on  n;  similarly  for  the  estimate  F  of  system  life  distribution.  Also  F^  will  denote  the 
vector  (/?,...,/£). 

The  following  lemma  is  needed  in  the  proof  of  strong  uniform  consistency  and  of  weak  convergence 
of  F. 


LEMMA  2.1.  For  any  structure  of  m  independent  components,  the  corresponding  reliability  function 
is  twice  continuously  differentiable  over  [0,  l]m,  and  the  first  and  second  partial  derivatives  are 
bounded  in  absolute  value  by  1  uniformly  over  [0,l]m. 


Proof :  For  p  =  (pi,. . .  ,pm)  <  (0,  l]m  and  k  =  1,2,...  ,m,  we  have  by  (2.6), 

= 


(2.7) 


From  (2.7)  we  have 


(2.8) 


and  for  t^fik, 

dpk&Pi  =  -  ~  {^(°*>  le,p)  ~  ^(0fc,0*,p)},  (2-9) 

in  an  obvious  extension  of  the  notation  (2.3).  By  (2.6)  h+  is  continuous  over  (0, 1]"*.  This  fact 
together  with  (2.7),  (2.8),  and  (2.9)  imply  that  the  first  and  second  partial  derivatives  are  contin¬ 
uous  on  [0,  l]m;  hence,  by  Theorem  6.18  of  Apostoi  (1964),  h+  is  twice  continuously  differentiable 
on  [0,  l]m.  Equation  (2.7)  implies  that  the  first  partials  are  bounded  in  absolute  value  by  1.  Since 
each  of  the  two  quantities  inside  the  braces  on  the  right  side  of  (2.9)  is  between  0  and  1,  it  follows 
that  the  second  partials  are  also  bounded  in  absolute  value  by  1.  The  lemma  follows  since  p  is  arbitrary. 


We  now  establish  the  strong  uniform  consistency  of  F  and  give  the  rate  of  convergence. 

PROPOSITION  2.1.  Let  T  >  0  be  such  that  for  j  =  1,. . .  ,m,mm(F}(T),  Pj(T))  >  0.  Then 

(a)  P(  sup  |  P{t)  -  F(t)  |=  ))  =  1. 

vo<t<T  v  n*  7  7 


(b)  If  Fi , . . . ,  Fm  are  continuous,  the  rate 
°( (~~  ^Pl®6^  by  0(/ 


' In  In  n' 


Proof :  The  convergence  results  for  the  individual  /'/a  given  in  Foldes,  Rejto,  and  Winter  (1980)  and 
Foldes  and  Rejto  (1981),  respectively,  together  with  Lemma  2.1  yield  Parts  (a)  and  (b),  respectively. 


A  review  of  the  counting  process  and  martingale  theory  used  below  is  given  in  the  survey  paper 
of  Andersen  and  Borgan  (1985).  Throughout,  we  adopt  the  convention  that  §  =  0.  The  index  n 
defining  a  process  is  suppressed  whenever  possible. 


To  prove  Theorem  1,  we  will  show  that  for  any  T  >  0  satisfying  maxi<y<m  Fj(T)  <  1,  that 


»*(^ . . K.), 


(2.10) 


where  W*, . . .  ,W^  are  independent  mean  zero  Gaussian  processes  with  covariance  given  by 

Cov(H7(f,),IV;(t,))  =  /“  for  0  <  i,  <  l2  <  T.  (2.11) 

(Now  and  henceforth,  the  symbol  d  signifies  weak  convergence  in  Dm[0,T\.)  Theorem  1  is  a  easy 
consequence  of  (2.10)  and  Theorem  5.1  of  Billingsley  (1968). 

We  prove  (2.10)  by  a  general  method  introduced  by  Aalen  (1978)  and  later  refined  by  Gill  (1980). 
We  define  the  stopped  process  F*  on  [0,oo),j  =  1, 2, ...  ,m,  by 


and  show  that 


*7(0  =  f,(‘ A  ZM,),  and  r;(()  =  1  -  /;((), 


4  ( ^  i  F\  Fm  Fm  \  d  irr*  i 

n  »•••»  jji,  J  — » , . . . ,  Wm), 


(2.12) 


(2.13) 


This  is  enough  to  prove  (2.10),  as  it  is  easy  to  see  that  the  difference  between  the  left  side  of  (2.10) 
and  the  left  side  of  (2.13)  converges  to  0  in  probability  in  D"‘[0,!T]. 


To  show  (2.13)  we  first  establish  that  for  each  n , 


i  =  i . . 


(2.14) 


.  t  <  V  (1  rt  *_V  f  ,♦  W 


fa  t,*  i,*  i.n.i  i  t’i n  j’t  i  i  i1.  >».  ‘ii  m  «i»  ' 


arc  orthogonal  square  integrable  martingales  with  respect  to  an  appropriate  family  of  a-  fields.  Weak 
convergence  in  (2.13)  then  follows  from  a  multivariate  version  of  a  martingale  central  limit  theorem 
due  to  Rebolledo  (1980).  The  orthogonality  allows  a  simple  extension  to  the  multidimensional  case 
of  the  proof  of  weak  convergence  given  by  Gill  (1983)  for  the  one  dimensional  case. 

To  show  that  the  processes  in  (2.14)  are  orthogonal  martingales,  we  will  need  to  be  careful  about 
the  families  of  o-fields  that  we  use. 

We  define  the  following  processes  on  [0,oo);  these  correspond  to  the  situation  where  we  imagine 
that  no  censoring  occurs. 

Nij(t)  =  I(Xij  <  0;  (2.15) 


JV>(«)  =  !>,,(<); 

i=i 

v.A‘)  =  nx>i  >  <); 

VM  -  £></(«); 

t=l 

AM*)  =  NtJit)  -  *,(*); 

A /,(*)  =  W)  -  M*)  (=E^'(<)). 


(2.15) 

(2.16) 

(2.17) 

(2.18) 


(2.19) 


(2.20) 

(2.21) 

(2.22) 


We  further  define  the  following  filtration: 


It  —  completion  of  <r(JV,-y(s);  1  <  i  <  n,  1  <  j  <  m,  a  <  t). 


(2.23) 


In  Section  6  we  will  consider  censoring  schemes  that  are  more  complicated  than  the  ones  involved 
in  Theorem  1.  Therefore,  we  wish  to  give  a  proof  of  the  fact  that  the  processes  in  (2.14)  are  orthog¬ 
onal  martingales  that  can  apply  to  more  general  censoring  mechanisms.  Thus,  corresponding  to  an 
arbitrary  censoring  mechanism  for  component  j  of  system  *,  let 


In  the  present  situation, 


Cij(t)  =  I{Xij  is  under  observation  at  time  t). 


CiA*)  =  HYij  >  *). 


(2.24) 


(2.25) 


w 


V? 


w? 


where  Ki  is  defined  by  (A.2). 

We  define  the  following  entities;  these  correspond  to  (2.15)-(2.23)  for  the  case  of  censoring. 


KW  =  (‘ (2.26) 

Jo 

W)  =  E  N‘A>);  (2.27) 

i=l 

V,;(0  =  C0(l)v;,(l)i  (2.28) 

^(‘)=XX(')i  (2.29) 

»sl 

r*  K.M 

4,«)  =  /o  (2.30) 

a;(,)= /:h^  (=E^(o)i  (2.3i) 

MCj(0  =  W&M  -  (2.32) 

M;(i)  =  iv;(<)  -  a;(<)  (=Em?)(o);  (2.33) 

»=1 

=  completion  of  <r(JV£(s);  1  <  *  <  n,  1  <  j  <  m,  s  <  t).  (2-34) 

We  further  define 

•»?(«)  =  mw  >  »)•  (2.35) 


The  following  proposition  (Theorem  3.1  of  Aalen  and  Johansen,  1978  and  equation  (3.2.12)  of 
Gill,  1980)  is  fundamental  in  establishing  that  the  processes  in  (2.14)  are  orthogonal  martingales. 

PROPOSITION  2.2.  Suppose  Fi , . . . ,  Fm  are  continuous  and  t  >  0  is  such  that  max1<J<m  F}  (t)  <  1. 
Then  for  each  j  and  for  all  n, 


ni/Mzggh,.i 

v  ?;(t)  )  J0  Lk/(3) 


(3)  P,-(«-)l 


dM°(s), 


(2.36) 


=  (*)  F}(s) 

Our  plan  is  to  show  that  My(t),j  =  l,...,m,  are  orthogonal  martingales  with  respect  to  either 
{Ft\t  e  [0,r]}  or  (  [0,r]}.  Then  we  will  use  Proposition  2.2  to  obtain  the  same  conclusion  for 

the  processes  in  (2.14). 


The  following  general  lemma,  which  is  well-known  (see,  e.g.  Andersen  et  al.,  1982),  is  an  essential 
part  of  our  proof  that  the  processes  in  (2.14)  are  orthogonal  martingales. 


Lemma  2.2.  Let  A/<y(<),C^(<),and  A /£•(*)  be  defined  by  (2.21),  (2.24),  and  (2.32),  respectively.  Let 
T  satisfy  Fj(T)  <  1  for  each  /,  and  Let  {At;t  e  [0,  J*]}  be  a  filtration  such  that 


(i)  Cij(')  is  Afpredictable 

(ii)  {(A/<,(t),^t);f  c  [0,  J1]}  is  a  square  integrable  martingale.  Then, 

At);t  e  [0,  T]}  is  a  square  integrable  martingale. 


Proof :  From  (2.32),  (2.26),  (2.30),  (2.28),  (2.21)  and  (2.19)  it  follows  that 

K  (t)  =  T  CiM  dMi}  (s).  (2.37) 

Jo 

Since  the  integrand  in  (2.37)  is  ^-predictable  and  Af,y  is  square  integrable  on  [0,T’J  (in  fact  uniformly 
bounded),  the  Stieltjes  integral  in  (2.37)  is  a  stochastic  integral  and  is  a  square  integrable  martingale 
(see  Aalen,  1978,  p.  703  for  a  discussion). 

Let  us  see  how  Lemma  2.2  applies  to  the  present  situation,  where  Ci}  (t)  =  J(Yiy  >  t),  with  Yi: 
defined  by  A.2.  Part  (ii)  of  Proposition  A.l  (in  the  appendix)  asserts  that  this  censoring  process  is 
^-predictable,  where  7t  is  defined  by  (2.23).  Now  it  'is  well-known  that  if 

T}1'3'1  =  completion  of  c(Nij(s);3  <  t) 

then  is  a  (bounded)  martingale  (on  [0,T]);  see  e.g.  Davis  (1983,  pp.  136-7). 

Since  Xij ,  i  =  l,...,n,  j  =  1, ...  ,m  are  independent,  this  implies  that  (A is  a  martingale 
on  [0,r].  Lemma  2.2  therefore  asserts  that  {(M,?.  (*),,£);*  e  [0,T]}  is  a  martingale.  It  is  easy  to 
check  that  M£(f)  e  7tc  with  7tc  defined  by  (2.34).  Using  the  fact  that  7tc  C  7t  it  is  easy  to  see  that 
{(M,?(t),  7tc);  te  [0,T]}  is  also  martingale.  Since  the  sum  of  martingales  is  a  martingale,  this  gives 
that 


7t);t  e  [0,!T]}  and  {(A/J (t),  7tc);  t  e  [0,  Tj}  are  square  integrable  martingales,  (2.38) 


with 


if  ji  =  h 
if  ji  #  to  ’ 


(2.39) 


the  orthogonality  in  (2.39)  resulting  from  the  fact  that  the  counting  processes  jVf  (t),. ..,  N^(t)  have 
no  common  jump  points  with  probability  one  (see,  e.g.,  Theorem  2.3.1  of  Gill,  1980). 


Let  ns  now  apply  Proposition  2.2.  It  is  easy  to  see  that  for  each  j,  the  left  continuous  processes 
Jy(s)fP/(s— ),  and  V?(s)  are  adapted  to  either  {7t}  or  {7tc}-  Therefore,  the  integrand  on  the  right 
side  of  (2.36)  is  predictable  with  respect  to  either  {?t}  or  {7tc}.  Since  this  integrand  is  also  bounded 
and  since  the  square  integrable  martingale  A/y  is  of  bounded  variation,  the  integral  in  (2.36)  is  a 
square  integrable  martingale,  with  covariation  process 


ar 


.  W4M  J 


(2.40) 


v'/.MA.W 

Equations  (2.39)  imply  that  this  quantity  is  0  if  jx  ^  j?,  and  that  for  each  j  =  m,  t  c  [0,rj, 


A'MAM  J 
o  L  *7M(AW)3 


"yW- 


(2.41) 


The  proof  of  the  weak  convergence  result  for  each  individual  ni  ( Fj  —  F*)jP*  is  now  the  same 
as  the  proof  of  Theorem  1.1  in  Gill  (1983),  which  uses  Theorem  V.l  of  Rebolledo  (1980).  The  joint 
weak  convergence  in  (2.13)  follows  from  the  orthogonality  result  in  (2.39)  and  (2.40),  and  a  simple 
multivariate  extension  of  Rebolledo’s  (1980)  Theorem  V.l. 


We  now  prove  Theorem  2.  The  uniform  bound  for  the  first  two  partial  derivatives  of  given  by 
Lemma  2.1  together  with  Taylor’s  Theorem  imply  that  for  each  t  c  [0,T], 


»*i*w  -  m  -  E  mo  (Aw  -  f>w)  i 

3=1 

^  T  E  E  (,55,  lA.  w  -  f,,  wi)  •  («g,  lA.  (0  -  4  wi)  ■ 


(2.42) 


Jl  =  1  =  1  -  “ 


The  right  side  of  (2.42)  converges  to  0  a.s.  by  the  results  of  Foldes  and  Rejto  (1981).  We  use  the 
fact  that  convergence  in  sup  norm  implies  convergence  in  the  Skorohod  topology  (see  page  111  of 
Billingsley,  1968)  to  conclude  that  the  process 

m 


»*|A(0  -  f(i)  -  £  M0  (Aw  -  r.  .-ill  -  0  in  D|0,r|. 


Thus,  the  proof  follows  by  showing  that 


»t  £  /,(()  (Fift)  -  #>(())  -i  IV, 
y-i 

which  is  a  consequence  of  Theorem  5.1  of  Billingsley  (1968)  and  Theorem  1. 


To  construct  confidence  intervals  for  F(i),  we  define  the  following  functions  and  processes  on 
[0,  oo). 

r*  dFf(s) 


C" 


-  (W  f  (_  j,  ,  r  «(.„  \ 

’()”  »  Jo  a, (*-)&,(*)  ^  (  ,W)  Tfcji- 


*«>/ 

l)(n-0 


where 


♦  35  1 

Also  define 

/.(*)  _  2b±\ 

'  Buy  . m.‘ 

The  quantity  ^  called  Greenwood’s  estimator  of  the  variance  of  F}{t). 


(2.43) 


LEMMA  2.3.  Suppose  are  continuous  and  T  >  0  is  such  that  mzLx1<y<m  F}(T)  <  1. 

Then  Y^Li  (0^/(0  *3  a  strongly  consistent  estimator  of  lJ(t)G}  {t). 

We  note  that  in  view  of  (1.8),  Theorem  2  and  Lemma  2.3  enable  the  formation  of  asymptotic 
confidence  intervals  for  F[t),t  e •[0,2’]. 


Proof  :  Part  (a)  of  the  proposition  in  Section  2  of  Hall  and  Wellner  (1980)  together  with  the  conver¬ 
gence  results  of  Foldes  and  Rejto  (1981)  imply  that  G/(t)  is  a  strongly  consistent  estimator  of  Gy(t). 
Lemma  2.1  implies  that  the  partial  derivatives  of  h+  are  continuous.  Thus,  it  follows  from  Proposition 
2.2  that  Ij(t)  is  astrongly  consistent  estimator  of  /,(<).  The  proof  follows.  g 


3.  ESTIMATION  OF  THE  RELIABILITY  IMPORTANCE  OF  COMPONENTS. 

The  quantity  Ij(t)  defined  by  (1.7)  is  called  the  reliability  importance  of  component  j  at  time  t. 
Its  natural  estimate  is  /y(t)  given  by  (2.42).  Let  be  small  numbers.  Note  that 

m 

h*(A(*)  +  .  .  •  ,Fm(t)  +  ^m)  -  h*(/l(t),..  •  ,Fm{t))=  V  £y //(*). 


Thus,  the  reliability  importance  of  components  may  be  used  to  evaluate  the  effect  of  an  improvement 
in  component  reliability  on  system  reliability,  and  can  therefore  by  very  useful  in  system  analysis  in 
determining  those  components  on  which  additional  research  can  be  most  profitably  expended.  For 
details,  see  pages  26-28  of  Barlow  and  Proschan  (1981),  and  the  review  by  Natvig  (1984). 

PROPOSITION  3.1.  Suppose  Fj , . . . ,  Fm  are  continuous  and  T  >  0  is  such  that  F/(T)  <1,  j  — 
1,2, ...,m.  Then 

Mh -im)  - 


where  (Yi, . . . ,  Ym)  is  a  vector  of  mean  zero  Gaussian  processes  whose  covariance  structure  is  given 
by 

Cov(Fj,(!1),^(iJ))  =  E(; 


(  a’h  1  ,, 

(  a*h  i  ,,  i 

\duj9duk 

“  dFM 

8k{  u)/fc(u) 


,  for  0  <  ti  <  <  T  and  j\  ,j3  =  1, . . . ,  m. 


As  before,  the  covariance  terms  in  (3.1)  can  be  estimated  consistently,  enabling  the  construction  of 
confidence  intervals  for  7y(t). 


The  proof  of  Proposition  3.1  is  similar  to  that  of  Theorem  2  and  is  omitted. 

I^EETICIENCY  O.F  tv?,  TR5  NAIVE.ESTIMATQR  Pmp. 

Define  the  asymptotic  relation  efficiency  of  F  vs  F*mp  (see  (1.1))  at  time  t  to  be  the  ratio  of  the 
asymptotic  variance  of  F*mp(t)  to  that  of  F(t)  : 

A*m  =  mm  / 1  mm  [  m 

We  assume  implicitly  that  Fi,...,Fm  are  continuous.  In  (4.1)  we  assume  that  t  is  such  that  the 
denominator  is  not  0.  The  condition  Fj(t)  t  (0,1)  for  all  j  is  sufficient  (but  not  necessary)  to  insure 
this.  Let  Tj  =  sup{t;  Fj(t)  <  1},  and  let  r  =  max/  ry.  Thus,  r  e  (0,oo].  It  is  difficult  to  study  ARE(-) 
since  this  quantity  depends  on  the  system  as  well  as  on  F1,...,Fm  and  on  t.  We  shall  consider  in 
some  detail  the  cases  of  series  and  parallel  systems,  since  these  are  often  considered  extreme  cases 
in  coherent  structure  theory.  Indeed,  in  our  situation  series  systems  give  rise  to  maximum  possible 
censoring,  while  parallel  systems  give  minimum  possible  censoring  (i.e.  no  censoring  at  all).  Thus,  a 
study  of  these  special  cases  will  give  insight  on  the  behavior  of  ARE(-). 


For  series  systems, 

P  =  (4.2) 

The  validity  of  (4.2)  for  a  series  system  of  two  components  is  well  known  (cf.  the  argument  leading  to 
equation  (2.6)  of  Efron,  1981}  and  the  extension  to  general  series  systems  presents  no  difficulty.  Thus, 
there  is  no  added  advantage  gained  by  considering  the  component  failure  times  when  estimating  the 
life  distribution  of  a  series  system. 

We  now  consider  parallel  systems.  The  reliability  function  is 

m 

Mpi«<  ••**»)  =  1  -  n^1  -Fy).  0<Pj<1  (4.3) 

y-i 

and  since  there  is  no  censoring,  £/(u)  =  P,  (u).  Thus,  from  (1.8)  the  asymptotic  variance  of  P(t)  is 

a.  v„/(i)  =  f;(n  F.i(o)/)(of,(<).  mi 

This  formula  can  also  be  obtained  directly  since  the  absence  of  censoring  makes  Theorems  1  and  2 
trivial.  The  restriction  of  t  to  the  interval  [0,T]  where  T  satisfies  F}(T)  <  1  for  all  j  is  superfluous. 
From  (4.4)  we  see  that 

ARE(t)  =  gs 


m/m 


(4.5) 


ERQfjQSITIQN  4.1.  For  parallel  systems, 

(i)  ARE{t)  >  1  (4.6) 

for  all  t  such  that  Fy(t)  >  0  and  t  <  r;  the  inequality  is  strict  if  there  are  at  least  two 
values  of  j  such  that  F,(i)  <  1  (i.e.  at  time  t,  we  do  effectively  have  a  system  of  at  least  2 
components). 

(ii)  Limtx«T  ARE(t)  =  1. 

(iii)  Assume  that  Fj(t)  >  0  for  all  t  >  0  and  all  j.  Then 

Um  ARE(t)  =  oo. 


Proof  of  (i)  :  By  (4.5),  we  see  that  (4.6)  is  equivalent  to 


We  prove  (4.7)  by  an  induction  argument  on  m.  For  m  »  1,  (4.7)  holds  trivially.  Assume  (4.7)  for 
m  -  1,  and  consider  the  expression 


B 


nr.  i  w 


,  fAt) 

'SSW 


(4.8) 


We  ose  the  induction  hypothesis  on  the  second  snm  in  (4.8)  to  obtain  that 


B  '  _  1  f-(‘>  1 

■  nr.i  r-w  nr.v^c)' 

The  right  side  of  (4.0)  is  equal  to 


(4.9) 


( _ I _ 

vnr-v*w  )f - 


MO 
(0 


(4.10) 


which  is  nonnegative.  This  establishes  the  induction  step,  and  consequently  (4.7).  If  there  are  two 
values  of  j  such  that  Fj(t)  <  1,  then  without  loss  of  generality  assume  that  one  of  these  is  j  =  m. 
Then,  (4.10)  is  strictly  positive,  and  hence  A/2£(t)  >  1. 


Proof  (ii)  :  From  (4.5)  we  see  that 


ARE(t)  = 


a  -  nr..  (oi/f  i‘i 
sr-.  4(«)/f><«) 


(4.11) 


Let  e  >  0,  and  let  S  >  0  be  such  that  if  t  «(r  -  5,r),  then  F}{t)  <  c,  for  j  =  l,...,m.  Now  let 
t  t  (t  -  6, r),  and  consider  first  the  expression 


ARE(t)  = 


i  -  nr-  f»i‘) 

E”.  */<<) 


(4.12) 


Substituting  1  -  £,(<)  for  F,(t)  in  the  product  on  the  right  side  of  (4.12)  and  expanding  this  product, 

we  see  that 

ARE(t)  =  1  +  5  (4.13) 


where  5  is  a  sum  of  terms  of  the  form 

f>,(i)fw(<)...f„(0 

■ 


Each  of  the  terms  in  (4.14)  is  less  than  e.  The  result  now  follows  from  the  fact  that 

ARE(t){  1  -  c)  <  A«£(t)  <  A££(t)(l  cP"*. 


(4.14) 


Pvt  (iii)  is  a  speciftl  c«m  of  Proposition  4.2  below,  which  stfttes  that  the  efficiency  of  the  nftive  estima¬ 
tor  /*•"**(*)  csn  be  arbitrarily  low  for  systems  where  sll  the  components  are  inessential:  <p{0},  1)  =  1 
for  ftll  j;  i.e.  fail  ore  of  any  particular  component  does  not  necessarily  cause  system  failure.  Examples 
of  such  systems  include  k  out  of  m  systems  for  k  <  m  -  1.  We  will  assume  that  F}{t)  >  0  for  all  t 
and  all  /;  this  is  to  avoid  problems  involving  division  by  0. 

PROPOSITION  4.2.  If  all  components  are  inessential,  then 

lim  AJ2£(t)  =  oo. 


Proof :  It  is  more  convenient  to  work  with  (AREft))"1.  From  (4.1)  we  have 


(AR£?(t))- 


l-l 


(4.15) 


Let  e  >  0,  and  let  6  >  0  be  such  that  if  t  e  (0,6),  then  Jfj(t)  >  1  -  c  for  all  j.  Then,  we  also  have 
F(t)  >  1  -  e  and  Fj(t)  >  1  —  e  for  all  j. 


Consider  the  expression 


1  J  “  F(t) 


(4.16) 


It  is  easy  to  see  that  for  t  e  (0,  £) , 

A(!)(l  -e)3  <  {ARE(t))~‘  <  A(<)(1  -  <)-s. 
Thus,  we  will  work  with  the  simpler  expression  A(t).  Let 


(4.17). 


i?(W) 


F(t)  ’ 


(4.18) 


We  will  show  that  for  each  j,Aj(t)  -*  0  as  t  -*  0.  We  now  consider  j4,(<),  and  to  ease  the  notation, 
assume  without  loss  of  generality  that  j  =  1.  Using  (2.7)  and  (2.6)  we  have 

_ -  y(o.cf)W>(i/-,t)}Vi(<) _ 


a  ■(<)  - 


where 


{Zu.a.J  i  -  U  -  *>(o,t/))*(V;()r.(«)} 


<■(£/;!)  =  [] 


.  (4.19) 


(4.20) 


In  (4.19)  and  (4.20),  U  is  in  Am_i  and  the  vector  (a,  u)  is  in  Am ,  for  a  =  0  or  1.  Let  C  = 
(U  t  Am- i;<p(l,U)  =  1  and  <p(0 ,U)  =  0}.  Then,  clearly,  the  numerator  of  (4.19)  ranges  only  over 


nUUIMR 


W9 


WiQQDntvxiwvvwwv 


U  t  C.  Since  deleting  the  stun  inside  the  first  set  of  braces  in  the  denominator  of  (4.19)  increases  the 
ratio  (4.19),  we  obtain  that 


>4.(0  < 


Note  that  if  U  e  C,  then  ^>(0,  U)  —  0;  therefore,  from  (4.21)  we  have 


Ai(0 


Lu.C  ^(^iO 


(4.21) 


(4.22) 


Let  U  €  C,  and  consider  now  Note  that  since  component  1  is  an  inessential  component, the  con¬ 

dition  <p( 0,  U)  *  0  implies  that  there  exists  a  j  t  {2, . . . ,  m}  such  that  17,  =  0.  Therefore,  V»( U;t )  <  c. 
This  fact,  together  with  (4.22)  implies  that  Ai(t)  is  bounded  above  by  e  times  the  cardinality  of  C. 
Since  e  was  arbitrary,  this  completes  the  proof.  | 

Let  us  consider  the  implications  of  Proposition  4.2.  Suppose  that  the  life  testing  experiment 
is  carried  out  over  limited  time  span.  If  the  system  is  made  highly  reliable  through  a  great  deal  of 
redundancy,  then  even  though  we  will  see  many  component  failures,  we  will  see  very  few  actual  system 
failures  over  the  time  span  of  the  experiment.  Thus,  information  from  component  failures  becomes 
important.  In  this  case  the  coat  of  designing  and  running  an  experiment  which  permits  continuous 
monitoring  of  component  failures  may  be  far  outweighed  by  the  greater  accuracy  gained  by  using  the 
estimator  F. 

Since,  as  was  mentioned  earlier,  series  and  parallel  systems  are  considered  extreme  cases  in  relia¬ 
bility  theory,  we  are  led  to  conjecture  that  for  arbitrary  coherent  systems: 

(i)  Let  I  C  (0,  oo )  be  the  set  of  all  t  such  that  the  denominator  of  (4.1)  is  nonzero.  Then 
ARE(t)  >  1  for  all  t  <  /,  with  equality  for  all  t  t  /  only  for  series  systems. 

(ii)  Limty.Up tARE(t)  =  1. 

(iii)  ARE(-)  is  monotonically  decreasing. 

The  estimator  P  may  be  thought  of  as  the  nonparametric  maximum  likelihood  estimator 
(NPMLE)  of  F.  Informally,  this  is  because  of  the  well  known  result  that  the  Kaplan-Meier  esti¬ 
mate  is  the  NPMLE  of  a  distribution  function  when  the  data  are  right  censored.  Thus  for  each  j ,  F, 
is  the  NPMLE  of  Ff;  an  extension  of  this  is  that  Px  x  . . .  x  Pm  is  the  NPMLE  of  F\  x  ...  x  Fm  (the 
x  denotes  product  measure).  The  invariance  principle  for  maximum  likelihood  estimates  implies  that 
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k+( Pi,. . . , Pm)  is  the  NPMLE  o (  h*(Fi, . . . , Fm ) .  Of  coune,  this  by  itself  does  not  in  any  way  imply 
any  asymptotic  optimality  result. 

S.  PARAMETRIC  MODELS. 

In  this  section  we  consider  a  parametric  formulation  of  our  problem.  We  assume  that  F,(t)  = 
Fj(t;  If)  is  absolutely  continuous,  with  density  fj(t; if),  where  If  =  (#9 , . . . , if,  )  belongs  to  an  open 
subset  0,  of  R*',  for  j  =  l,...,m.  The  distributions  Fj(t;lj)  are  not  assumed  to  come  from  the 
same  parametric  family.  Denote 

•  »(2„y,5l»J)}  (5.1) 

and  let 

*.,«,)  -  n  (5.2) 

ial 

Let  lj  be  the  value  of  l}  maximising  L}(l}).  The  main  results  of  this  section  are  that  under  certain 
regularity  conditions  on  the  parametric  families  Fy(t;#y),  the  estimators  t}  are  individually  asymptot¬ 
ically  normal  and  furthermore  asymptotically  independent.  The  results  follow  from  the  development 
of  Section  2  and  the  results  of  Borgan  (1984). 

Frequently  in  reliability  it  is  possible  to  specify,  for  certain  indices  jx , . . . ,  jh,  a  relationship  among 
Fjx » •  •  •  i  Fik ,  for  example  In  such  situations  it  may  be  possible  to  estimate  i]x  from 

the  combined  data  (Zy,  ,dy, ),...,,  (Zjk,jyk).  This  is  the  case  for  example  for  parallel  systems  of 
identically  distributed  components.  We  do  not  assume  any  known  relationships  among  the  F/s.  It 
is  also  possible  to  specify  parametric  models  for  certain  Fy’s  but  not  for  others.  We  do  not  consider 
this  either.  The  techniques  used  below  will,  however,  indicate  how  such  problems  may  be  addressed. 

Let  £j(li, . .  •  ,5m)  be  the  (full)  likelihood  of  (Z },6,).  By  the  random  censorship  established  by 
(2.1)  and  (2.2),  we  have 

C,{h . Im)  =  •••*"•)  (&  3' 

where 

Li  (#„...,#«) » rn  ^(j,.  a(2.,;#.) — ^(2,,;#^))] 

tal 

{[Ml„F1(2’,;#l),...,FB1(Z„;#m)]*‘'}  (5  4) 


with  given  by  (2.4).  Since  we  do  not  assume  any  known  relationships  among  th< 

F,(f; it  follows  that  L ,  does  not  depend  on  l}.  Thus,  the  only  important  part  of  the  likelihood 


is  (The  condition  that  Lj  not  depend  on  #/  is  referred  to  in  the  literature  ss  "  noninformat  ive 

censoring"  .  If  Lj  does  depend  on  #/,  then  Lj  is  viewed  ss  a  "partial  likelihood"  ;  see  Chapter  5  of 
Kalbleisch  and  Prentice,  1980). 

Letting  ot/(t;f,)  =  /y(t;0y)//y(t;0y)  denote  the  hazard  rate,  (5.2)  may  be  rewritten  as 

LA*j)  =  nW(W''«p(-  f  aj(u;$j)du)}.  (5.5) 

im  1 


By  (2.27)  and  (2.29),  we  have 

!og  Lj(tj)  =  f  \ogaj(u\ij)dNj(u)  -  f  <*,(«*, #y )Vf(u)du. 
Jo  J  0 


(5.6) 


Let 


Ujk(t‘Jj)  =  j*  ^a,(*;#,)/a,(u;#,)dJV;(u)  -  J*  ^a,(u;8y)V/(«)d«, 

for  j  =  1,  •  •  • ,  m,  Jc  —  1, . .  • , Pj .  (5.7) 


Thus,  differentiating  under  the  integral  sign  in  (5.6)  (we  will  impose  regularity  conditions  later)  we 
obtain 


a#. 


logLy(ly)  =  C/y*(oo;fy). 


(5.8) 


Referring  to  equations  (2.31)  and  (2.33),  we  have 

r  t  ^ 

=  yo  (^|^«j(*;^)/«r(«»;^)dAfy(*),  j  =  /,...,m,  k  =  1 , . . . , Pj .  (5.9) 


Borg  an  (1984)  shows  that  for  fixed  /,  under  certain  regularity  conditions  (see  below)  if  we  assume 
only  that 


(M‘(t),/,)ia  a  locally  square  integrable  martingale  with  <  A/*(  ), Af'(  )  >  (t)  =  A*(t),  (5.10) 


then  with  probability  tending  to  1,  the  equations 

t/,*(oo;#,)  =  0,  k-l,...,pf 


(5.11) 


have  exactly  one  consistent  solution  (call  it  f,),  which  is  s  local  maximum  of  Furthermore, 

this  solution  is  asymptotically  normal.  In  our  setup  L,(9})  is  proportional  to  the  likelihood  of  (Z ,,£•■). 


However,  it  is  important  to  notice  that  the  results  concerning  fy  are  valid  whether  or  not  this  is  the 

case. 

Consider  now  Assumptions  A-D  of  Borgan  (1984)  (with  »  =  1).  Assume  that  these  hold  for  every 
j  =  1, . . .  ,m,  with  Yj(u)  and  yy(*)  in  his  paper  given  in  our  paper  by  Y/(u)  and  &}  ( u),  respectively. 
Also  make  the  notational  change  that  t  ranges  over  the  positive  axis  instead  of  over  [0, 1]. 

THEOREM  3  Under  the  above  assumptions, 

(i)  With  probability  tending  to  1,  for  each  j  the  likelihood  equations  (5.11)  have  exactly  one 
consistent  solution  ly,  and  ly  is  a  local  maximum  of  Ly(#y). 

(ii)  y/n  (ii  -  ...  ,0m  -  is  asymptotically  normal,  with  mean  0  and  covariance  matrix 

e:‘  o  ...  o 

(  ;  T  '  :  ) 

®  ®  *  *  *  Em 

where  is  the  inverse  of  the  p}  x  py  matrix  £y  whose  k,l- th  element  is 


£,(u)du. 


Furthermore,  Yl,  may  be  consistently  estimated  by  the  matrix  whose  k,t- th  element  is 

Proof :  Our  (somewhat  sketchy)  proof  relies  heavily  on  Theorems  1  and  2  of  Borgan  (1984).  As  was 
mentioned  earlier,  the  starting  point  of  Borgan ’•  proof  is  the  assumption  that  (5.10)  above  is  valid. 
That  this  is  the  case  follows  by  (2.38)  and  (2.39).  Part  (i)  follows  directly  from  Theorem  1  of  Borgan 
(1984). 

To  obtain  the  distributional  result  of  Part  (ii)  we  proceed  as  in  the  proof  of  Theorem  2  of  Borgan 
(1984),  noting  in  addition  that  the  orthogonality  relationships  given  by  (2.39)  imply,  via  (5.9),  that  for 
ji  *  I,  -  •  •  ,Py, ,  *  1, the  locally  square  integrable  martingales  £/„*,(•  ;#yj  and 

C/y,*,(-  ;#y,)  are  orthogonal.  The  distributional  result  follows  by  the  argument  in  Billingsley  (1961, 
Theorems  2.2  and  10.1).  The  consistency  of  the  variance  estimate  follows  directly  from  Theorem  2  of 
Borgan  (1984). 


In  Theorem  1  (and  also  in  Theorem  3)  we  assumed  that  the  component  iifelengths  are  censored 
by  system  lifelength.  The  fact  that  the  censoring  process  (t)  =  /(Yiy  >  t)  is  predictable  was  key 
to  the  development  of  our  results.  It  is  therefore  clear  that  our  treatment  can  be  used  to  approach 
other  problems  which  involve  predictable  censoring  of  Xi} . 

Examples  of  predictable  censoring  include  experiment  termination  after  a  prespecified  time,  cen¬ 
soring  of  the  Iifelengths  of  certain  components  by  independent  outside  causes,  experiment  termination 
after  a  prespecified  number  of  observed  failures  of  component  j,  etc.  An  especially  interesting  class 
of  examples  is  given  by  systems  in  which  the  failure  of  a  subsystem  prevents  further  monitoring  of 
any  of  the  components  comprising  the  subsystem.  For  component  j  in  system  t,  let  denote  the 
lifelength  of  the  subsystem  whose  failure  would  prevent  further  monitoring  of  component  j.  Then 
is  censored  by  T,  A  The  proof  that  for  each  j  the  censoring  process  is  ^-predictable  is  only 
notationally  different  from  the  proof  of  Part  (ii)  of  Proposition  A.l.  The  processes  corresponding 
to  (2.14)  are  still  orthogonal  martingales  with  respect  to  {7t}-  The  weak  convergence  result  is  the 
same  except  for  the  calculation  of  the  3}’a.  Formulas  for  3,  can  be  readily  obtained  by  using  the 
concept  of  a  modular  decomposition  of  a  coherent  system  (see  pp.  16-17  of  Barlow  and  Proschan, 
1981).  These  formulas  are,  however,  notationally  rather  messy  since  in  general  a  component  may  be  a 
member  of  several  subsystems  and  one  therefore  has  to  specify  for  each  j  the  subsystem  whose  failure 
would  prevent  further  monitoring  of  component  j.  It  should  be  kept  in  mind  that  precise  formulas 
for  the  asymptotic  distribution  are  not  necessary  for  the  construction  of  confidence  intervals:  these 
are  obtained  through  Greenwood’s  formula  (cf.  Lemma  2.3). 

Consider  now  Meilijson’s  (1981)  model.  Let  Di  be  the  set  of  components  that  are  found  dead  at 
the  autopsy  of  system  ».  The  data  is  then  {(Ti,Di);i  =  1,.. .,»}.  The  censoring  of  Xij  by  T,  is  now 
quite  complex:  there  is  not  only  both  right  censoring  (j  Ji  Di)  and  left  censoring  (j  e  Di),  but  if  j  t  D, 
we  do  not  know  if  X,j  <  T,  or  if  =  T{  (component  j  caused  system  death).  The  distributions 
are  not  necessarily  identifiable  from  the  distribution  of  (Ti,Di).  For  example,  for  parallel 
systems,  D\  is  always  {l,...,m};  it  is  clear  that  F\,...,Fm  cannot  be  identified  from  IlyLi  the 
distribution  of  T\ .  Meilijson  gave  conditions  on  the  system  and  on  F\ , . . . ,  Fm  for  identifiability. 
The  problem  of  estimating  F  from  the  data  is  very  interesting,  but  does  not  seem  amenable  to  our 
approach. 


In  Section  2  we  assumed  the  existence  of  a  censoring  random  variable  Yy  that  satisfies  (2.1),  (2.2), 
and  (2.4).  Here  we  define  Yy,  formally  prove  that  it  satisfies  (2.1),  (2.2),  and  (2.4),  and  prove  that 
censoring  is  ^-predictable,  where  7t  is  defined  by  (2.23).  Define  the  binary  function  by 

^;'(®l)  •  •  •  i®m)  =  ^(1ji*1i‘,m  *m)t  =  0»1>  fc  =  l,2,...,l7i,  (>ll) 

where  ^  is  the  structure  function.  (See  the  paragraph  preceding  equation  (2.6).)  The  censoring 
random  variable  Yiy  is  defined  as  follows: 

Yiy  =sup{t;^y(/(Xil  >  >  0)  =  !}•  (-A2) 


(i)  For  each  j,  Yjy, Yjjy, . . . ,  are  i.i.d.  random  variables  satisfying  (2.1),  (2.2),  and  (2.4). 

(ii)  The  censoring  process  defined  by 

C{j(t)  =  /(Yiy  >  t)  is  ^—predictable. 

Proof  of  (i)  :  It  follows  from  (A2)  that  Yiy  is  a  function  of  the  vector  (ly,  I(Xn  >  t), . . .  ,I{Xim  >  t)). 
Thus  it  follows  that  Yiy,Yay,,..,  are  i.i.d.  and  that  Yiy  satisfies  (2.2). 

We  proceed  to  prove  (2.4).  The  structure  function  4>  is  increasing  in  its  arguments  (see  Definition 
2.1,  page  6  of  Barlow  and  Proschan,  1981)  and  hence  a  fortiori  4>j  is  increasing  in  its  arguments.  Thus 


and  so 


{Yi}  >t}  =  {MHXa  >  t),...,I(Xim  >  t))  =  1} 


P(Yi y  >  t)  =  P(*y(/(X,i  >  t) . I{Xim  >  t))  =  1). 


It  is  easy  to  see  that  the  right  side  of  (A3)  is  equal  to  h*(ly, .£(*))  and  so  y*  satisfies  (2.4) .  To  prov  * 
that  Yiy  satisfies  (2.1),  we  consider  two  cases:  $ y  =  1  and  Si y  =  0.  We  first  prove  (2.1)  for  the  case 
Si y  =  1.  Since  0  is  increasing  in  its  arguments, 

sup{t;  4>(I(Xu  >  t),...,Jp Cim  >  t))  =  1} 

<  sup{t;  4>j(I(Xn  >  t), . . .  tI(Xim  >  t))  =  l}.  (A5) 


.•N’V 


iVtVt 


It  is  clear  that  the  left  side  of  (A5)  equals  Ti  and  the  right  side  of  (A5)  equals  YJy.  Hence 


Ti  <  Yij. 


(A6) 


Since  =  1, 


X,.  <  Ti. 


(A7) 


It  is  immediate  from  (A6)  and  (A7)  that  Xij  <  Yij,  which  implies  that  (2.1)  holds  for  this  case.  We 
now  prove  that  (2.1)  is  satisfied  if  =  0.  Since  Sij  =  0,  it  follows  that  Xij  >  Ti  =  Zij.  Hence 
0  =  4j(I{Xn  >  Zij),...,I(Xim  >  Zij)).  Thus  it  follows  from  (A2)  that 

Yij  <  Zij.  (AS) 


It  is  easy  to  see  that  (A6)  hold  for  this  case.  Thus  Yij  =  Zij,  which  implies  that  (2.1)  is  satisfied  for 
this  case. 

Proof  of  (ii)  :  From  (A3)  we  see  that 

[Yij  >  t)  e  7t,  and  this  implies  that  {Y,j  >  t}  c  Tt. 


The  left  continuity  of  Cij  now  gives  the  ^-predictability. 
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